Privacy Policy BJ77 – How We Protect Malaysian Players' Personal Data

This Privacy Policy ("Policy") describes how the BJ77 platform ("BJ77", "we", "us") collects, uses, stores, protects, and in certain circumstances shares your personal data when you use our services on the website bj77-bangla.com and any related platforms.

Bj77 is the data controller for all personal information collected through this platform. This means we are fully responsible for ensuring your data is handled in accordance with Malaysia's Personal Data Protection Act (PDPA) 2010 and all applicable data protection regulations.

By registering an account and using the BJ77 platform, you acknowledge that you have read and understood this Privacy Policy. If you disagree with any part of this policy, you are advised not to continue using the platform. If you have any questions before registering, please contact our customer support team first.

Bj77 only collects data that is strictly necessary to provide you with a secure, compliant, and high-quality service. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

Information you provide directly during registration:

• Full name as it appears on your official Malaysian identification document
• An active Malaysian phone number for OTP verification
• The password you create (stored in encrypted form — BJ77 cannot read your password)

Data collected during platform use:

• Records of all deposits and withdrawals, including the payment method used (Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, FPX Maybank2u, FPX CIMB Clicks) and transaction amounts in MYR
• Sports Betting history — matches wagered on, odds selected, bet amounts, and outcomes
• Casino game history — records of baccarat, blackjack, slots, and other game sessions
• Device information — device type, operating system, browser version
• IP address at login and during platform use
• Record all live chat sessions with the BJ77 customer support team

Data collected automatically through cookie technology:

• Session cookies to maintain your login during an active session
• Preference cookies to save your display and language settings
• Aggregated analytics data on how players use the platform (with no individual identification)

BJ77 does not collect MyKad number, passport number, full banking details (such as complete bank account numbers or credit/debit card numbers), or any other sensitive information not required for platform operations.

Every piece of data we collect serves a clear and legitimate purpose. bj77 uses your personal data for the following:

Platform operations and service delivery:

• Creating and managing your bj77 account
• Processing your deposits via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX
• Processing your winnings withdrawal requests in MYR
• Processing and settling Sports Betting — Malaysia Super League football, EPL, badminton, cricket, e-sports, and all other sports
• Providing access to Live Casino games and slots
• Managing the VIP Rewards programme and calculating reward points

Security and compliance:

• Verifying your identity and preventing fraud or unlawful use of the platform
• Detecting suspicious activity such as logins from unusual locations or abnormal transaction patterns
• Complying with applicable anti-money laundering (AML) legal requirements in Malaysia
• Ensuring the platform is not accessed by individuals under 18 years of age

Service improvement and communications:

• Providing support through 24/7 customer service channels in Bahasa Malaysia
• Sends important account-related notifications — including deposit confirmations, withdrawal alerts, and security warnings
• Sending BJ77 promotional information, bonuses, and special offers — only to players who have opted in to receive them
• Analysing usage data in aggregate (without identifying individuals) for platform improvements

Data security is an investment BJ77 never compromises on. We implement multiple layers of technical and organisational safeguards to ensure your data remains protected at all times:

Technical safeguards:

• 256-bit SSL Encryption — all communications between your device and BJ77's servers are encrypted using TLS 1.3, the highest available standard
• AES-256 data-at-rest encryption — all data stored in the bj77 database is encrypted, meaning that even if someone gains physical access to the servers, they cannot read the data without the encryption key
• Encrypted password — your password is never stored in plain text. We use a robust hashing algorithm with random salting, meaning no one — including bj77 staff — can ever view your actual password
• Two-factor authentication (2FA) — an additional security feature available to all accounts, requiring a supplementary SMS OTP code alongside your password at login
• Firewall and intrusion detection systems — BJ77's infrastructure is protected by multi-layered firewalls and a real-time security monitoring system operating 24 hours a day

Organisational safeguards:

• Role-based access control (RBAC) — bj77 staff can only access data required for their specific job functions
• Internal security audits are conducted on a regular basis to identify and address any vulnerabilities
• All BJ77 staff who handle customer data undergo data protection training and are bound by confidentiality agreements
• A clear security incident response procedure — in the event of any data breach, bj77 will notify affected players and the relevant authorities within the timeframe stipulated by law

While BJ77 takes all reasonable security measures, it is important to understand that no online system can guarantee 100% absolute security. We therefore encourage all players to take their own personal security precautions as well, including using strong and unique passwords, enabling 2FA, and never sharing login credentials with anyone.

Bj77 does not sell, rent, or disclose your personal data to any third party for marketing or commercial purposes. However, there are certain situations where sharing information is necessary to provide services to you or to comply with the law:

Payment service providers: When you make a deposit or withdrawal, bj77 is required to share the minimum necessary transaction information with the relevant payment provider — whether that is Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or an FPX provider. This sharing is strictly necessary to process your financial transaction and is subject to each payment provider's own privacy policy.

Game software providers: To deliver live casino games including baccarat, blackjack, roulette, and slots, BJ77 works with third-party game software providers. These providers may receive the minimal technical data necessary to deliver the gaming experience, but do not have access to your full financial or personal information.

Legal requirement: bj77 may be required to disclose your personal data to the relevant authorities if mandated by a court order, valid legal summons, or other legal obligations in Malaysia. In such circumstances, bj77 will disclose only the minimum information necessary and, where permitted by law, will notify you of the disclosure.

In all of the above cases, BJ77 ensures that any third parties involved are bound by confidentiality and data protection obligations equivalent to our own standards, and that your data is not used for any purpose other than those stated.

BJ77 uses cookies and similar tracking technologies to ensure the platform functions properly, enhance the user experience, and analyse platform usage patterns in aggregate. The following outlines the types of cookies used and their purposes:

• Essential Cookies — required for the platform's core functions, such as maintaining your login session while using the bj77 platform. These cookies cannot be disabled, as the platform will not function properly without them.
• Preference Cookies — stores your preferences such as language, selected layout, and other display settings, so you do not need to reconfigure them each time you visit.
• Analytics Cookies — collects aggregated, anonymised data on how players use the platform — which pages are visited most frequently, average session duration, and which pages may have technical issues. This data is used solely to improve the bj77 platform and is not linked to your personal identity.
• Security Cookies — used to identify suspicious login attempts and protect your account from unauthorised access based on unusual usage patterns.

You can manage cookie settings through your web browser preferences. However, disabling essential cookies may affect the functionality of the bj77 platform and your overall experience. bj77 does not use third-party cookies for advertising or cross-site tracking purposes.

Bj77 retains your personal data only for as long as is necessary for the purposes stated in this policy or as required by applicable Malaysian law. We follow the principle of data minimisation — when data is no longer needed, it is securely deleted or anonymised.

BJ77's data retention guidelines are as follows:

• Active account data — retained for the entire duration that your account remains active and in use on the bj77 platform
• Financial transaction records — retained for 7 years in accordance with Malaysia's accounting and audit legal requirements
• Betting and game history — retained for 3 years for dispute resolution and regulatory compliance purposes
• e-wallet and FPX records — retained for 5 years for financial audit purposes
• Security logs and IP addresses — retained for 90 days for active security monitoring
• Customer support records — retained for 2 years for service improvement purposes and dispute reference
• Analytics cookie data — anonymised within 30 days

When your bj77 account is permanently closed — whether at your own request or by a platform decision — bj77 will delete or anonymise all your personal data within 30 days, except for data required to be retained by law as specified in the table above. Legally required data will be separated from the active database and will no longer be used for any operational purpose.

As a BJ77 player and data subject under Malaysia's Personal Data Protection Act (PDPA), you have a number of rights you may exercise in relation to your personal data. BJ77 respects and facilitates all of these rights:

To exercise any of the above rights, please contact the bj77 customer support team via live chat on the platform or by email at support@bj77-bangla.com. BJ77 may need to verify your identity before processing any data-related requests to ensure the security of your account.

While BJ77 does everything possible to protect your data and account, effective security requires cooperation from both sides. Here are the security practices we encourage all Malaysian players to adopt:

• Use a strong password — choose a password containing at least 8 characters, combining uppercase letters, lowercase letters, numbers, and symbols. Avoid using easily guessable personal information such as your date of birth or name.
• Do not reuse passwords — use a unique password for your bj77 account that is not shared with any other online account.
• Enable two-factor authentication (2FA) — this feature adds an extra layer of security, meaning that even if someone knows your password, they still cannot log in without the OTP sent to your phone.
• Do not share your login credentials — bj77 will never ask for your password through any channel. Do not share your password or OTP with anyone claiming to be a bj77 staff member.
• Log out from shared devices — if you access bj77 from a shared device, make sure you log out fully after every session.
• Monitor your account activity — review your login history and account transaction history regularly. If you notice any unrecognised activity, contact the bj77 support team immediately.

Bj77 may update this Privacy Policy from time to time to reflect changes in our data protection practices, applicable legislation, or the services we offer. We are committed to notifying you of any material changes to this policy.

When we make significant changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this document
• Displaying an in-platform notification on bj77 at least 7 days before the changes take effect
• Sending SMS notifications to your registered phone number for highly material changes

We encourage you to review this Privacy Policy periodically to stay informed about how bj77 handles your personal data. Your continued use of the bj77 platform after any changes to this Privacy Policy take effect constitutes your acceptance of the updated terms.

If you do not agree with any changes made, you have the right to close your account before those changes take effect. In such cases, please contact our support team for assistance with the account closure process and the return of any valid remaining balance.

If you have any questions, concerns, or requests regarding BJ77's Privacy Policy or how we handle your personal data, we encourage you to contact us directly. Our team is available in Bahasa Malaysia, 24 hours a day, 7 days a week.

You can reach us through:

• Live Chat — the fastest way to get a response, available on every page of the BJ77 platform
• Email — support@bj77-bangla.com (response within 24 business hours)

When contacting us regarding privacy matters, please clearly state the nature of your request or enquiry. For requests that require identity verification (such as data copy or data deletion requests), we may need to ask for additional verification to protect your account from unauthorised access. The verification process is straightforward and designed entirely for your own security.

BJ77 is committed to responding to all privacy-related enquiries with the seriousness and respect they deserve, within a reasonable timeframe. Your privacy is not merely a legal obligation to us — it is part of the trust that has been built between BJ77 and our 500,000+ Malaysian members over the years, and that trust is something we value and uphold with the utmost responsibility.